Add authRequired for protected routes.